This part of the site is where I keep my working notes: software engineering in the broad sense, privacy and security in the real world, and the books, essays, and odd topics that end up influencing how I think.

I write as a builder with a healthy aversion to hype. I prefer things that can be tested, explained, and used. Some posts are technical, some are reflective, but the common thread is the same: understanding complex systems well enough to improve them without fooling ourselves.

Expect analysis, experiments, and practical tips; along the way, you will also find digressions and literary reviews. If you are here mainly for security, you may also enjoy Crypto-Gram, Bruce Schneier's newsletter.